1Introduction
Leafa is a catalog of your own belongings: what you own, where it lives, and how long since you last used it. This policy explains what we record, why we record it, and how you get it out or get rid of it. It covers the Leafa app and this website.
The data controller is Honeyside di Daniele Molinari, which operates Leafa.
2Data we collect
Two kinds: what you type in, and the small amount your device has to tell us for notifications to work.
2.1 Data you provide
- Account: your name, email address and password. The password is only ever stored as an Argon2 hash.
- Your catalog: items, spaces, photos, receipts, prices, notes, and the review answers you give.
- Household: if you host or join one, the membership itself, plus who added each item and who answered each review.
- Sign in with Apple or Google: the identifier and email address that service returns, and nothing else. We never see your password for those accounts.
2.2 Data collected automatically
- Push token: the token your device issues when you allow notifications, so a review reminder, a household request or an occasional announcement can reach that device and no other.
- Time zone: your device's time zone, so a review reminder arrives in the morning where you are instead of the middle of your night.
- Usage counters: how many items you have and how many bytes your photos occupy. That is what your plan's limits are measured against.
- Nothing else: no analytics, no advertising identifiers, no third-party trackers, no location, no contacts, no address book.
3How we use your data
Each purpose below has a legal basis under the GDPR, named at the end of the line.
- 1Showing your catalog back to you. The map, the usage gaps, the review queue, the completion score, search and your exports. Necessary to provide the service you signed up for (contract).
- 2Reminding you what needs review. Only while the reminder switch in Settings is on, and never when your queue is empty (consent, withdrawable at any time).
- 3Sending the emails an account needs. Sign-in, password reset and address verification codes (contract).
- 4Applying your plan's limits. Counting items and stored bytes against the plan that covers your catalog, and recording whether a subscription is active (contract).
- 5Keeping accounts safe. Expiring one-time codes, limiting repeated attempts, and investigating abuse (legitimate interest).
- 6Telling you what happens in your household. When someone asks to join the household you host, or when the person hosting approves you, that notification is sent whether or not review reminders are switched on. It is part of running the household rather than something to opt into (contract).
- 7Occasional announcements about the app. Rarely, and never bought by anyone: a new feature, or something you need to know about your account. To stop these you can turn notifications off for Leafa in your device settings (consent).
4Data sharing
A short list of providers runs the parts we do not run ourselves. Each receives only what its job requires.
- Servers and storage: your account and catalog live in our own database on servers we operate; photos and receipts live in cloud object storage.
- Email delivery: reset and verification codes are sent through an SMTP provider, which sees the address and the message.
- Push delivery: notifications pass through Expo's push service and from there to Apple's or Google's, which is the only way a phone can be reached.
- Payments: subscriptions are billed by the App Store or Google Play and reconciled through RevenueCat. Your card details never reach us.
- Legal requests: we disclose data only where the law obliges us to, and only what is asked for.
We never sell your data. There are no advertisers in this product, and nothing in your catalog is shared with anyone outside your own household.
5Data security
What protects the catalog, in practice rather than in principle:
- Passwords are stored only as an Argon2 hash, never in a form anyone can read, us included.
- Every request is authenticated and scoped to your own account or household, so another catalog is not reachable from yours.
- The API and every uploaded file are served over HTTPS.
- You can put the whole app behind Face ID, Touch ID or your fingerprint from Settings.
6Your rights
Under the GDPR you have the rights below. Two of them you can exercise yourself, in the app, without asking us at all.
Right of access
Ask what we hold about you. Most of it is already on your screen.
Right of rectification
Correct your name or any entry in your catalog, from the app.
Right of erasure
Delete your account from Account settings. Immediate and permanent.
Right to data portability
Export the whole catalog as CSV or PDF whenever you like.
Right to object
Object to processing that rests on our legitimate interest.
Right to restriction
Ask us to hold off processing while a question is open.
7How to delete your account
Deletion is immediate and permanent. There is no grace period, no recycle bin, and no way for us to bring a deleted catalog back.
Deletion from the app (recommended)
Four taps, no email, no waiting:
- Open the More tab.
- Tap Account.
- Scroll to Delete account.
- Confirm in the dialog that appears.
Your items, spaces, photos, receipts, exports and notifications are removed straight away, not queued and not archived.
If you host a household: the catalog belongs to you, so deleting your account deletes what the household shares and removes everyone's access to it. Hand it over, or ask them to export first, if that is not what you want.
If you joined someone's household: items and photos you added belong to the person hosting it and stay in their catalog. Your account, your profile picture and your membership are deleted.
Deletion request by email
If you cannot reach the app, write to us from the address on the account:
Write from the address the account uses, so we can tell it is you.
Before you delete: export your catalog if you want to keep a copy. More, then Export data, as CSV or PDF. After deletion there is nothing left to export.
Requests sent by email are completed within 30 days, and normally within a few days. We may ask one question to confirm the request came from the account holder, and nothing more.
8Data retention
Nothing is kept for its own sake:
- Account and catalog: for as long as the account exists, and no longer.
- Photos and receipts: deleted from storage when you remove them, when the item goes, or when the account does.
- Exports you generate: kept until you delete them from the export screen.
- One-time codes: a password reset code lasts 15 minutes, a verification code 60, then it stops working.
10Minors
Leafa is not intended for children. You must be at least 16, or old enough to consent to data processing where you live, whichever is higher. If you believe a child has created an account, write to us and we will remove it.
11Changes to this policy
If this policy changes in a way that matters, we will say so in the app before the change takes effect. The date at the top of this page always reflects the version you are reading.
12Contact
Any question about this policy, or about the data we hold on you:
Honeyside di Daniele Molinari
P.IVA: IT08510780722 · REA: BA-631501
We aim to respond within 5 business days.
If you are in the EU or the UK and you believe we have handled your data badly, you can also complain to your national data protection authority.